A security and IT “essentials” application (or “app”) for a data intake and query system are described, where the essentials apps provide functionality that generally make security and IT easier for users. Four categories of functionality are provided by the essentials apps including: (1) finding content, (2) learning how a data intake and query system security app works, (3) improving production and deploying the security tools successfully, and (4) measuring users' success. The described security and IT essentials apps help users better understand where to begin with using a data intake and query system, enable users to see a data intake and query system in action, and provides in-product help and guidance, thereby enabling users to more readily obtain insights into their own IT environments and to enable operational and security improvements in those environments.